User Application Access Control Flaw in Intel Processors
CVE-2026-20716

7.2HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Processors
Vendor
CVE Published:
11 August 2026

What is CVE-2026-20716?

An improper access control vulnerability exists in specific Intel Processors that may allow an authenticated user to escalate privileges within Ring 3: User Applications. This manipulation could enable a simple hardware adversary to exploit the system under certain conditions, requiring high complexity efforts and special internal knowledge but no user interaction. As a result, the confidentiality and integrity of the affected system could be compromised, posing a significant risk to security.

Affected Version(s)

Intel(R) Processors See references

References

https://intel.com/content/www/us/en/security-center/advis...

CVSS V4

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.